Weird issue today any reason why i can t enable auto rotate Infisical Users #general

Join Slack

Weird issue today, any reason why i can’t enable a...

# general

Christophe Jauffret

07/20/2026, 6:02 PM

Weird issue today, any reason why i can’t enable auto rotate on my ACME cert , this is critical

👀 1

✅ 1

Sheen Santos Capadngan

07/20/2026, 6:13 PM

If you're using an ACME client, renewal should be handled by the ACME client you're using rather than by Infisical @Christophe Jauffret. Is that how you've currently set it up?

Christophe Jauffret

07/20/2026, 8:23 PM

There is no ACME client involved ,initial acme request has been made by infisical and I’m using infisical sync feature to push the cert to an endpoint who don’t support ACME So I clearly need the ability to have infisical rotate the certificate

Christophe Jauffret

07/20/2026, 8:24 PM

There is already a rotate now feature on this kind of certificates but don’t want to launch it manually of course

Sheen Santos Capadngan

07/20/2026, 8:31 PM

Just to make sure I understand your setup, how did you issue this certificate that you're trying to enable auto-renewal for @Christophe Jauffret?

Christophe Jauffret

07/20/2026, 9:07 PM

Directly inside infisical using request certificate

Christophe Jauffret

07/20/2026, 9:10 PM

I use infisical as an acme client to generate certs for endpoints who don’t support ACME and next I use infisical sync to push them to these endpoints

Christophe Jauffret

07/21/2026, 3:23 PM

@Sheen Santos Capadngan i think there is wider issue/bugs even when i try to renew the certificate i have this error which is definitively not expected

Christophe Jauffret

07/21/2026, 3:23 PM

for info this certificate have been generated from an API enrollment method

Saif Rahman

07/22/2026, 8:04 AM

This looks like a bug. Will try to get it patched by today.

Christophe Jauffret

07/22/2026, 8:04 AM

👍🏻

Christophe Jauffret

07/22/2026, 8:05 AM

for info the issue is only if your profile have auto renew disable

Saif Rahman

07/22/2026, 8:06 AM

Ok. Is this a profile that was created before we introduced “applications”?

Christophe Jauffret

07/22/2026, 8:06 AM

yes this is strongly possible

Saif Rahman

07/22/2026, 8:06 AM

Earlier profiles had only one enrollment method, and I’m assuming this one internally stayed as ACME.

Christophe Jauffret

07/22/2026, 8:08 AM

in my case in the app

Christophe Jauffret

07/22/2026, 8:08 AM

but i don’t know what was the config before app

Christophe Jauffret

07/22/2026, 8:08 AM

don’t remember

Saif Rahman

07/22/2026, 8:08 AM

Ok, is this on US cloud? app.infisical.com?

Christophe Jauffret

07/22/2026, 8:08 AM

on prem instance sorry

Christophe Jauffret

07/22/2026, 8:09 AM

but i can collect some info if you want just ask

Saif Rahman

07/22/2026, 8:10 AM

Sure, I’ll get back to you if I need anything.

Christophe Jauffret

07/22/2026, 8:10 AM

Saif Rahman

07/22/2026, 11:18 AM

Copy code

SELECT
  c."commonName",
  p."enrollmentType"      AS profile_label,
  cr."enrollmentType"     AS issued_via,
  cs."certId" IS NOT NULL AS has_key
FROM certificates c
JOIN pki_certificate_profiles p ON p.id = c."profileId"
LEFT JOIN LATERAL (
  SELECT "enrollmentType" FROM certificate_requests
  WHERE "certificateId" = c.id ORDER BY "createdAt" ASC LIMIT 1
) cr ON true
LEFT JOIN certificate_secrets cs ON cs."certId" = c.id
WHERE p.slug = 'public-cloudnative-nvdlab';

Saif Rahman

07/22/2026, 11:18 AM

@Christophe Jauffret can you run this query and share the result?

Christophe Jauffret

07/22/2026, 12:26 PM

Copy code

commonName                    | profile_label | issued_via | has_key
-------------------------------------------------+---------------+------------+---------
 <http://nai.qa-1.gpu-farm.cloudnative.nvdlab.net|nai.qa-1.gpu-farm.cloudnative.nvdlab.net>        | acme          | acme       | f
                                                 | acme          | acme       | f
                                                 | acme          | acme       | f
                                                 | acme          | acme       | f
                                                 | acme          | acme       | f
                                                 | acme          | acme       | f
 <http://nai.dev-1.gpu-farm.cloudnative.nvdlab.net|nai.dev-1.gpu-farm.cloudnative.nvdlab.net>       | acme          | acme       | f
                                                 | acme          | acme       | f
                                                 | acme          | acme       | f
 <http://nai.nai-gateway.gpu-farm.cloudnative.nvdlab.net|nai.nai-gateway.gpu-farm.cloudnative.nvdlab.net> | acme          | acme       | f
 <http://nkp-mgmt.nai-nvd.cloudnative.nvdlab.net|nkp-mgmt.nai-nvd.cloudnative.nvdlab.net>         | acme          | acme       | f
 <http://nai.nai-gateway.nai-nvd.cloudnative.nvdlab.net|nai.nai-gateway.nai-nvd.cloudnative.nvdlab.net>  | acme          | acme       | f
 <http://nai.nai-prod.nai-nvd.cloudnative.nvdlab.net|nai.nai-prod.nai-nvd.cloudnative.nvdlab.net>     | acme          | acme       | f
                                                 | acme          | acme       | f
 <http://nai.qa-1.gpu-farm.cloudnative.nvdlab.net|nai.qa-1.gpu-farm.cloudnative.nvdlab.net>        | acme          | acme       | f
                                                 | acme          | acme       | f
                                                 | acme          | acme       | f
                                                 | acme          | acme       | f
 <http://nai.nai-stage-1.gpu-farm.cloudnative.nvdlab.net|nai.nai-stage-1.gpu-farm.cloudnative.nvdlab.net> | acme          | acme       | f
 <http://nai.qa-1.gpu-farm.cloudnative.nvdlab.net|nai.qa-1.gpu-farm.cloudnative.nvdlab.net>        | acme          | acme       | f
                                                 | acme          | acme       | f
                                                 | acme          | acme       | f
                                                 | acme          | acme       | f
 <http://nai.dev-2.gpu-farm.cloudnative.nvdlab.net|nai.dev-2.gpu-farm.cloudnative.nvdlab.net>       | acme          | acme       | f
                                                 | acme          | acme       | f
                                                 | acme          | acme       | f
 <http://nai.nai-prod-1.gpu-farm.cloudnative.nvdlab.net|nai.nai-prod-1.gpu-farm.cloudnative.nvdlab.net>  | acme          | acme       | f
 <http://nai.qa-1.gpu-farm.cloudnative.nvdlab.net|nai.qa-1.gpu-farm.cloudnative.nvdlab.net>        | acme          | acme       | f
                                                 | acme          | acme       | f
                                                 | acme          | acme       | f
 <http://nkp-mgmt.nai-nvd.cloudnative.nvdlab.net|nkp-mgmt.nai-nvd.cloudnative.nvdlab.net>         | acme          | acme       | f
 <http://nai.qa-1.gpu-farm.cloudnative.nvdlab.net|nai.qa-1.gpu-farm.cloudnative.nvdlab.net>        | acme          | acme       | f
                                                 | acme          | acme       | f
 <http://nai.dev-2.gpu-farm.cloudnative.nvdlab.net|nai.dev-2.gpu-farm.cloudnative.nvdlab.net>       | acme          | api        | t
                                                 | acme          | acme       | f
 <http://pc.dragon-lab.cloudnative.nvdlab.net|pc.dragon-lab.cloudnative.nvdlab.net>            | acme          | api        | t
 <http://pc.romanticism-lab.cloudnative.nvdlab.net|pc.romanticism-lab.cloudnative.nvdlab.net>       | acme          | api        | t
 <http://pc.solengcnai-lab.cloudnative.nvdlab.net|pc.solengcnai-lab.cloudnative.nvdlab.net>        | acme          | api        | t
(38 rows)

Christophe Jauffret

07/22/2026, 5:41 PM

@Saif Rahman is it helpful ?

Saif Rahman

07/22/2026, 6:36 PM

Oh yea, super helpful. I’m assuming you’re having issues with these ones:

Copy code

commonName                                   | profile_label | issued_via | has_key
---------------------------------------------+---------------+------------+--------
<http://nai.dev-2.gpu-farm.cloudnative.nvdlab.net|nai.dev-2.gpu-farm.cloudnative.nvdlab.net>    | acme          | api        | t
<http://pc.dragon-lab.cloudnative.nvdlab.net|pc.dragon-lab.cloudnative.nvdlab.net>         | acme          | api        | t
<http://pc.romanticism-lab.cloudnative.nvdlab.net|pc.romanticism-lab.cloudnative.nvdlab.net>    | acme          | api        | t
<http://pc.solengcnai-lab.cloudnative.nvdlab.net|pc.solengcnai-lab.cloudnative.nvdlab.net>     | acme          | api        | t

Saif Rahman

07/22/2026, 6:37 PM

I’ve raised a PR and it will be merged soon. github.com/Infisical/infisical/pull/7376

Saif Rahman

07/23/2026, 2:03 AM

@Christophe Jauffret Try v0.162.12, released a fix

Christophe Jauffret

07/23/2026, 5:40 AM

@Saif Rahman problem perfectly fixed, thanks a lot

🙌 2

3 Views

Open in Slack

Previous Next